Plaintext Private Key Exposure in Arista EOS Devices

CVE-2026-73465

What is CVE-2026-73465?

In specific conditions on Arista EOS devices, certain non-standard debugging trace levels may lead to the writing of plaintext private keys to log files. This situation necessitates authenticated local administrative access to the device shell, and the explicit enabling of special debugging modes. Although identified internally by Arista, no evidence of exploitation has been discovered in customer environments, highlighting the importance of secure logging practices and access controls.

References